Is an incoming email genuine? What PaperOffice AI can check

What it is and what it is for

Do you want to know whether an invoice email really comes from your supplier? Important: PaperOffice AI does not automatically check incoming emails for authenticity, for example via SPF, DKIM or DMARC. There is no “genuine” or “fake” verdict. You do have tools to check for yourself.

How it works

1. Open Documents and select a document from the email intake.
2. Choose Actions → Email → Show email details. It shows header, sender and recipients.
3. Use Actions → Email → Open original email to see the original message.
4. If the email exists as a PDF (export or screenshot): under Document AI → Trust Agent, create an agent with the verification profile Email export / screenshot PDF. Start it via Actions → Agents & workflows → Trust → Check with Trust Agent.

Good to know

• The email export profile looks for hidden content, header manipulation and edited image-only PDFs. The Trust Agent is a paid feature.
• With AI-DMS Ultra, a security audit checks attached receipts and invoices, for example the supplier's VAT ID via VIES.
• The Fake Email Detector only checks an email address and its domain, for example for disposable addresses. It does not check whether a single message is genuine.
• If in doubt, call the sender on a number you already know, especially when bank details have changed.